Privacy Policy

Effective Date: 09/04/2026

Last Updated: 09/04/2026

1. Who We Are

1.1 Geeky Code Ltd ("Company", "we", "us", or "our") is a company registered in England and Wales (Company Number: 12200751). We are the data controller for the personal data described in this policy.

1.2 If you have any questions about this Privacy Policy or how we handle your data, you can contact us at: hello@geekyco.de

2. What Data We Collect

2.1 Account Information – When you sign up for one of our services, we collect your name, email address, and any other information you provide during registration.

2.2 Payment Information – If you subscribe to a paid service, payment details are collected and processed by our payment provider, Stripe. We do not store your full card details on our systems.

2.3 Usage Data – We collect information about how you interact with our services, including login times, features used, and service interaction logs. This helps us maintain and improve our services.

2.4 Communications – If you contact us by email or through our website, we keep a record of that correspondence.

2.5 Cookies – We use only essential cookies as described in our Cookie Policy. We do not use analytics, marketing, or advertising cookies.

3. How We Use Your Data

We process your personal data for the following purposes:

• * To provide, operate, and maintain our SaaS services.
• * To manage your account and process payments.
• * To communicate with you about your account, service updates, or support requests.
• * To detect, prevent, and address security issues or technical problems.
• * To comply with legal obligations.

We do not use your data for marketing purposes unless you have given us explicit consent to do so.

4. Legal Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

• * Contract – Processing is necessary to perform our contract with you (i.e., to provide our services).
• * Legitimate interests – Processing is necessary for our legitimate business interests, such as improving our services and ensuring security, provided these interests do not override your rights.
• * Legal obligation – Processing is necessary to comply with a legal obligation to which we are subject.
• * Consent – Where we rely on consent, you have the right to withdraw it at any time.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We share data only with the following categories of recipients, and only as necessary to provide our services:

For full details of our sub-processors and data processing arrangements, see our Data Processing Agreement.

6. International Data Transfers

6.1 Your data is primarily stored in data centres within the EU and UK.

6.2 Where personal data is transferred outside the UK or EEA (for example, to Stripe in the United States), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or reliance on an adequacy decision.

7. How Long We Keep Your Data

7.1 We retain your personal data only for as long as necessary to provide our services and fulfil the purposes described in this policy.

7.2 Upon termination of your account, we will delete or anonymise your personal data within 90 days, unless retention is required by law.

7.3 You may request early deletion of your data at any time by contacting us.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

• * Right of access – You can request a copy of the personal data we hold about you.
• * Right to rectification – You can ask us to correct inaccurate or incomplete data.
• * Right to erasure – You can ask us to delete your personal data (the "right to be forgotten").
• * Right to restrict processing – You can ask us to limit how we use your data.
• * Right to data portability – You can request your data in a structured, commonly used format.
• * Right to object – You can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at hello@geekyco.de. We will respond within one month, as required by law.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

9.1 We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit and at rest, access controls, and regular security monitoring.

9.2 In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, notify you without undue delay.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

12. Governing Law

This Privacy Policy is governed by the laws of England and Wales.